Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yH9RfeR99cKkMWBPZ8vLuyFAvVo.roa
File: yH9RfeR99cKkMWBPZ8vLuyFAvVo.roa (raw, json)
Hash identifier: qXS6/OKObD3IHNrMB/L5aH+JhUW90XyQ43WiTjcpRbM=
Subject key identifier: C8:7F:51:7D:E4:7D:F5:C2:A4:31:60:4F:67:CB:CB:BB:21:40:BD:5A
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018570F0CAA4DC78026F705EC6E6197F5CD4
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yH9RfeR99cKkMWBPZ8vLuyFAvVo.roa
Signing time: Mon 02 Jan 2023 05:25:06 +0000
ROA not before: Mon 02 Jan 2023 05:25:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209200
IP address blocks: 81.15.203.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:ca:a4:dc:78:02:6f:70:5e:c6:e6:19:7f:5c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 2 05:25:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c87f517de47df5c2a431604f67cbcbbb2140bd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:33:e3:0a:14:34:d9:7a:26:24:6e:a9:be:bb:
93:14:7d:73:04:de:d7:04:80:b1:c8:cd:17:84:52:
af:eb:e2:30:c1:35:40:dc:5b:22:c9:c6:4c:1f:5c:
f5:be:cb:6a:43:b3:58:cc:7c:81:99:62:e8:f0:83:
36:f9:eb:86:dc:2f:f0:cb:19:be:81:f0:ff:41:0e:
a6:0e:5b:2d:cf:8e:de:ae:b1:56:b9:77:30:de:a0:
88:b3:75:14:62:78:b9:fb:5e:39:aa:3f:ee:85:5d:
03:7b:1f:5e:a6:d8:4b:e3:8d:57:98:55:9d:2e:bc:
4a:2f:d7:1b:d0:45:49:7d:6c:ff:a8:2b:db:f9:45:
25:4b:2b:07:ba:a1:0a:16:05:d2:ed:0c:f4:db:70:
af:c1:a9:65:dc:7e:83:b1:28:cb:1e:82:12:3d:b1:
71:fe:85:21:71:72:2e:95:a6:66:5d:bd:57:fa:74:
14:98:c1:76:8b:48:fa:46:51:72:39:d8:a9:9e:c5:
d1:cb:10:5f:1e:ba:e7:ee:d3:e5:53:38:d4:97:b1:
f6:a9:65:90:30:4d:d1:ab:1d:22:c5:ca:0e:8e:cb:
a1:a3:59:56:2e:33:f3:90:e0:cf:c4:ae:77:1d:70:
c8:fb:9d:8b:53:ec:d9:54:01:f7:97:75:1b:2a:79:
32:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7F:51:7D:E4:7D:F5:C2:A4:31:60:4F:67:CB:CB:BB:21:40:BD:5A
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/yH9RfeR99cKkMWBPZ8vLuyFAvVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.203.0/24
81.15.237.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8b:3a:d2:e2:53:bb:d7:ac:c4:4a:2d:a2:80:b7:89:be:fb:
c4:8a:67:fd:13:3e:bc:72:96:77:d6:07:34:d2:fa:24:3d:f0:
4b:21:d6:b5:0e:5d:cf:f1:21:7e:39:d2:c5:5d:f0:67:5d:18:
b8:f7:66:12:4a:be:9b:1c:cf:bc:d4:d3:c4:d8:6d:f4:44:94:
69:17:fa:ba:66:9a:1c:76:09:73:f3:33:15:d3:3f:dc:85:c2:
f3:1e:6e:c8:bd:38:c1:f9:81:45:ba:75:18:30:1d:4b:51:f7:
cc:6a:73:8f:5e:8d:e4:bf:13:ac:76:76:f4:87:19:f6:95:39:
4c:52:64:97:ff:8a:41:f2:3d:61:c6:25:26:1e:76:2d:f0:26:
68:50:a9:2f:92:84:d4:be:95:54:9f:91:ee:68:7f:ac:3c:e8:
e8:66:53:71:9c:30:00:04:60:b2:9c:5e:1f:7b:af:48:1e:f6:
b3:60:a1:77:f4:17:37:be:33:83:00:40:94:28:49:25:d9:e9:
1e:3c:fa:74:22:4f:f8:a8:6e:34:d1:83:69:ea:c8:b2:7e:e1:
7b:6b:ef:6d:a5:75:73:03:22:cf:0f:e6:5a:2b:39:ac:31:3e:
01:9a:c1:d5:51:7f:47:97:e2:1a:ba:62:e2:9b:d1:72:fc:57:
41:80:84:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:59:24 2025 by rpki-client